openSUSE Security Update : mysql-cluster (openSUSE-SU-2012:0617-1)

MySQL Cluster 7.1.21 fixes several security issues and bugs. Please refer to the following upstream announcement for details : http://dev.mysql.com/doc/refman/5.1/en/mysql-cluster-news-7-1.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE: Security Advisory for regular (openSUSE-SU-2013:1140-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for update (openSUSE-SU-2013:1176-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox 权限许可和访问控制漏洞(CVE-2013-1696)

CVE-2013-1696 Firefox是美国Mozilla基金会开发的一款开源Web浏览器。 Mozilla Firefox 21.0及之前的版本中存在漏洞，该漏洞源于程序没有正确强制实施X-Frame-Options保护机制。远程攻击者可通过使用带有多重响应HTTP服务器推送功能的特制网站，利用该漏洞实施点击劫持攻击 0 Mozilla Firefox = 21.0 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://www.mozilla.org/security/announce/2013/mfsa2013-58.html...

CVE-2013-1696

CVE-2013-1696 affects Mozilla Firefox prior to 22.0 where X-Frame-Options protection is not enforced when using server push with multipart responses, enabling clickjacking via crafted pages. The issue is tracked in MFSA 2013-58 and was addressed by Mozilla in Firefox 22.0 and later. OpenSUSE/NVD ...

Mozilla Firefox Multiple Vulnerabilities - June 13 (Windows)

The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillafirefoxmultvulnjun13win.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Firefox Multiple Vulnerabilities - June 13 Windows Authors: Arun Kallavi Copyright: Copyright c...

Mozilla Firefox Multiple Vulnerabilities (Jun 2013) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox Multiple Vulnerabilities - June 13 (Mac OS X)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillafirefoxmultvulnjun13macosx.nasl 6074 2017-05-05 09:03:14Z teissa $ Mozilla Firefox Multiple Vulnerabilities - June 13 Mac OS X Authors: Arun Kallavi Copyright:...

Ubuntu: Security Advisory (USN-1696-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux USN-1696-2

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN16962.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for linux USN-1696-2 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

USN-1696-2: Linux kernel regression

USN-1696-1 fixed vulnerabilities in the Linux kernel. Due to an unrelated regression inotify/fanotify stopped working after upgrading. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jon Howell reported a flaw in the Linux kernel's KVM Kernel-based...

Ubuntu: Security Advisory (USN-1696-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1696

CVE-2012-1696 affects MySQL Server (Oracle MySQL 5.5.19 and earlier) with an unspecified vulnerability in the Server Optimizer. The description notes remote authenticated users could affect availability via unknown vectors; exact exploit method, affected subcomponents, or fix/version details are ...

CVE-2011-1696

CVE-2011-1696 affects Novell Identity Manager (IDM) User Application versions 3.5.0–4.0.0 and Identity Manager Roles Based Provisioning Module 3.6.0–4.0.0. The vulnerability is a cross-site scripting (XSS) flaw where an attacker can inject arbitrary web script or HTML via the apwaDetail (apwaDeta...

Firefox JavaScript引擎Math.Random()跨域信息泄露漏洞

BUGTRAQ ID: 33276 CVE ID: CVE-2009-1696,CVE-2008-5913 Firefox是非常流行的开源WEB浏览器。 Firefox的JavaScript实现的Math.random函数中存在安全漏洞，攻击者可以对该函数的种子值进行逆向。由于对于每个浏览的会话伪随机数生成器仅提供了一次种子，因此可以将这个种子值用作唯一的令牌跨不同的网站识别和追踪用户。 Mozilla Firefox 3.6.x Mozilla Firefox 3.5.x Mozilla SeaMonkey 2.0.5 厂商补丁： Debian ------...

CVE-2009-1696

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session...

CVE-2009-1696

CVE-2009-1696 affects WebKit/Apple Safari and related iOS components, where Safari before 4.0 (including iPhone OS 1.0–2.2.1 and iPod touch 1.1–2.2.1) used predictable JavaScript RNG. This predictability could allow remote servers to track a Safari user’s session behavior. Connected documents con...

Debian: Security Advisory (DSA-1696-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1696-1 : icedove - several vulnerabilities

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird mail client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0016 Justin Schuh, Tom Cross and Peter Williams discovered a buffer...

CVE-2008-1696

Directory traversal vulnerability in makepost.php in DaZPHPNews 0.1-1, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the prefixdir parameter...